Principles of Secure Coding

This course is part of Secure Coding Practices Specialization

Instructor: Matthew Bishop, PhD

Sponsored by Louisiana Workforce Commission

19,051 already enrolled

4 modules

Gain insight into a topic and learn the fundamentals.

4.4

(350 reviews)

Intermediate level

Recommended experience

15 hours to complete

3 weeks at 5 hours a week

Flexible schedule

Learn at your own pace

4 modules

Gain insight into a topic and learn the fundamentals.

4.4

(350 reviews)

Intermediate level

Recommended experience

15 hours to complete

3 weeks at 5 hours a week

Flexible schedule

Learn at your own pace

Skills you'll gain

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

8 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

Build your subject-matter expertise

This course is part of the Secure Coding Practices Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV

Share it on social media and in your performance review

There are 4 modules in this course

This course introduces you to the principles of secure programming. It begins by discussing the philosophy and principles of secure programming, and then presenting robust programming and the relationship between it and secure programming. We'll go through a detailed example of writing robust code and we'll see many common programming problems and show their connection to writing robust, secure programs in general. We’ll examine eight design principles that govern secure coding and how to apply them to your own work. We’ll discuss how poor design choices drive implementation in coding. We’ll differentiate between informal, formal, and ad hoc coding methods. Throughout, methods for improving the security and robustness of your programs will be emphasized and you will have an opportunity to practice these concepts through various lab activities. A knowledge of the C programming language is helpful, but not required to participate in the lab exercises.

In this module, you'll be able to describe key concepts in secure programming including typical problems and procedures. You'll be able to differentiate between robust programming and secure programming and you'll generalize from philosophies of "what to watch out for" and "where to look" to specific situations.

What's included

10 videos1 reading2 assignments1 discussion prompt

10 videosTotal 65 minutes

Course Introduction2 minutesPreview module
Module 1 Introduction1 minute
The Philosophy of Secure Programming2 minutes
Defining Secure Programming4 minutes
Robust vs. Secure Programming14 minutes
Security Policies and Procedures8 minutes
Secure Programming General Philosophy10 minutes
Checking Design and Implementation9 minutes
Where to Look for Vulnerabilities11 minutes
Secure Programming Summary0 minutes

1 readingTotal 10 minutes

A Note From UC Davis10 minutes

2 assignmentsTotal 75 minutes

Module 1 Practice Quiz30 minutes
Module 1 Quiz45 minutes

1 discussion promptTotal 10 minutes

Learning Goals10 minutes

In this module, you will be able to recall eight software design principles that govern secure programming. You will write a short program, in any language you like, to determine whether the system enforces the Principle of Complete Mediation. You'll be able to apply design principles from Saltzer, Schroeder and Kaashoek to code situations.

What's included

11 videos1 reading2 assignments1 discussion prompt

11 videosTotal 35 minutes

Module 2 Introduction1 minutePreview module
Secure Programming Design Principles Overview2 minutes
Principle of Least Privilege3 minutes
Fail-Safe Defaults3 minutes
Principle of Economy of Mechanism1 minute
Principle of Complete Mediation1 minute
Separation of Privilege Principle3 minutes
Principle of Open Design7 minutes
Principle of Least Common Mechanism4 minutes
Principle of Least Astonishment6 minutes
Secure Programming Design Principles Summary1 minute

1 readingTotal 10 minutes

Complete Mediation - What Is Going On?10 minutes

2 assignmentsTotal 60 minutes

Module 2 Practice Quiz30 minutes
Module 2 Quiz30 minutes

1 discussion promptTotal 150 minutes

Complete Mediation (Suggested Activity)150 minutes

In this module, you will be able to explain the issues that can arise from fragile programming. You'll be able to discuss how design issues drive implementation and be able to distinguish between robust and fragile code. You'll be able to explain what can go wrong in fragile code and be able to write a robust version of fragile code.

What's included

9 videos2 readings2 assignments1 discussion prompt

9 videosTotal 60 minutes

Module 3 Introduction1 minutePreview module
Robust Programming Overview0 minutes
Robust Programming Basic Principles3 minutes
An Example Of Fragile Code13 minutes
Error Handling11 minutes
Cohesion, New Interfaces, and Token Generation13 minutes
Token Generation and Interpretation5 minutes
Creating and Deleting a Queue5 minutes
Adding and Removing Elements to a Queue5 minutes

2 readingsTotal 15 minutes

Before You Begin This Module...5 minutes
Fragile Programs - What Is Going On?10 minutes

2 assignmentsTotal 45 minutes

Module 3 Practice Quiz15 minutes
Module 3 Quiz30 minutes

1 discussion promptTotal 150 minutes

Fragile Programs (Suggested Activity)150 minutes

In this module, you will be able to describe how to use techniques that mimic formal methods to improve the robustness and security of programs. You will also be able to compare and contrast formal, informal, and ad hoc programming methods. You'll be able to write a program to demonstrate how a poorly-written program or library can cause incorrect results.

What's included

9 videos1 reading2 assignments2 discussion prompts

9 videosTotal 41 minutes

Module 4 Introduction1 minutePreview module
Methods for Robustness Overview0 minutes
Methods Overview: Formal, Informal, and Ad Hoc Methods3 minutes
Overview of Formal Methods2 minutes
Login Program Example10 minutes
Incorporating Hierarchical Decomposition Methodology9 minutes
Login Program: Authenticating a User11 minutes
Login Program: Preconditions and Postconditions0 minutes
Course Summary1 minute

1 readingTotal 10 minutes

Robust Programs - What Is Going On?10 minutes

2 assignmentsTotal 45 minutes

Module 4 Practice Quiz15 minutes
Module 4 Quiz30 minutes

2 discussion promptsTotal 160 minutes

Robust Programs (Suggested Activity)150 minutes
Self-Reflection10 minutes

Instructor

Instructor ratings

4.2 (75 ratings)

Matthew Bishop, PhD

University of California, Davis

2 Courses23,287 learners

Offered by

University of California, Davis

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Learner reviews

4.4

350 reviews

5 stars
59.25%
4 stars
26.78%
3 stars
8.83%
2 stars
3.13%
1 star
1.99%

Showing 3 of 350

Reviewed on Apr 5, 2022

Very helpful. Recommending this course for others as well.

Reviewed on Jun 3, 2020

The course provides good insights in secure coding and robust programming. However, I think there should more than 10 questions for each module for assesment.

Reviewed on Aug 2, 2020

Good introductory course for those who are not familiar with secure coding

View more reviews